Make AllowAllPropertySecurity respect DenyAll to mask non-serializable properties.